Λεπτομέρειες βιβλιογραφικής εγγραφής
| Τίτλος: |
Impact of security assessment for more secure software – a tactics and multi-dimensional perspective. |
| Συγγραφείς: |
Ali, Mohammad1 (AUTHOR) ali792334@gmail.com, Uddin, Md Sala2 (AUTHOR), Uddin, Nayeem3 (AUTHOR), Hasan, Md Mahbub3 (AUTHOR) |
| Πηγή: |
Information Security Journal: A Global Perspective. May2026, p1-15. 15p. 3 Illustrations. |
| Θεματικοί όροι: |
*Risk assessment, *Computer software development, *Computer security vulnerabilities, Warnings |
| Περίληψη: |
Security assessment activities in the software development life cycle (SDLC) are often carried out in a fragmented manner, where requirements prioritization, threat identification, and risk scoring are treated as separate steps and provide limited traceability to actionable mitigation. This paper proposes an integrated SDLC-oriented security assessment framework that unifies security requirements prioritization, structured threat modeling, quantitative risk scoring, and pattern-guided mitigation within a single workflow. The framework prioritizes security requirements using SQUARE/CLASP, identifies threats using STRIDE, and prioritizes risks using DREAD. High-priority threats are then mapped to a mitigation workflow guided by security patterns (Detect–Block–Respond–Recover), supporting iterative reassessment across development stages. The framework is evaluated using STRIDE/DREAD-based threat simulations across six STRIDE threat categories and quantified using the proposed improvement metric. The results indicate an average increase of 27–35% in overall security effectiveness and a consistent shift of high-severity risks toward medium/low levels across the evaluated cases. Overall, the proposed workflow provides a practical and repeatable approach for integrating requirements, threat modeling, and mitigation decision-making across the SDLC. [ABSTRACT FROM AUTHOR] |
|
Copyright of Information Security Journal: A Global Perspective is the property of Taylor & Francis Ltd and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) |
| Βάση Δεδομένων: |
Business Source Index |